CVE-2025-62360

HIGH

Wegia < 3.5.1 - SQL Injection

Title source: rule

Description

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/dependente_documento.php endpoint, specifically in the id_dependente parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This vulnerability is fixed in 3.5.1.

Exploits (1)

exploitdb WORKING POC
by onurdemir · bashwebappsphp
https://www.exploit-db.com/exploits/52483

References (4)

Scores

CVSS v3 8.8
EPSS 0.0008
EPSS Percentile 22.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
wegia/wegia < 3.5.1
Published Oct 13, 2025
Tracked Since Feb 18, 2026